Scott,

What engine are you running?

Michael

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Tuesday, November 27, 2001 9:52 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] W32.BadTrans.B@mm slipping thru the cracks.



>I'm using NetShield as my command line scanner with the latest DAT file
>4172. I'm capturing viruses left and right, but customers are letting us
>know they are getting the W32/BadTrans.B@mm worm. It has been about 10 days
>since I've seen any Badtrans captures. I have re-installed the new dat file
>and have seen no change. According to McAfee they have it covered in the
>current dat files.

The W32/BadTrans.B@mm is a variant of the original Badtrans virus, and just
started appearing this past weekend.

If the latest DAT file (from Sunday or later) isn't catching it, you should
try upgrading the engine as well -- it seems that you need to be using a
recent McAfee engine for it to get caught.
                                   -Scott

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

Reply via email to